Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Apache tomcat calendar example cross site scripting and cross site request forgery vulnerability
Sep 04 2007 03:00AM
tusharvartak hotmail com
Apache Tomcat/4.1.31 ships with built in examples. One of the example calendar.jsp suffers from input validation error and could be exploited for cross site scriptingand cross site request forgery.
[ more ]
Copyright 2010, SecurityFocus